CVE-2019-0042

4.2 mediumEPSS 0.3%

Medium (4.2) in juniper identity management service. EPSS 0.3% chance of exploitation in the next 30 days.

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.

Severity

CVSS 3.1

4.2 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWEs: CWE-305, CWE-404, CWE-669
Published: 2019-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

juniper:identity_management_service

References

https://kb.juniper.net/JSA10934
https://kb.juniper.net/JSA10934

Check your stack JSON